Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b301434-8508-3e5a-87f3-08d0899b2f93.roa
File:                     2b301434-8508-3e5a-87f3-08d0899b2f93.roa (raw, json)
Hash identifier:          eeNNqNcRhj28ev0gF8ErqUVgzLqq5S5r+Hk/CsF5yrI=
Subject key identifier:   96:28:F7:88:06:50:55:CA:6E:46:68:0A:30:26:99:AB:7D:0F:2C:3A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0979CB42604085CFC0C16C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b301434-8508-3e5a-87f3-08d0899b2f93.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        72.216.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:9c:b4:26:04:08:5c:fc:0c:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=f87d547b-7cb1-4b4e-a925-c71b87306069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:4b:66:88:f8:98:1a:0c:03:32:ba:ea:00:
                    92:ec:4f:e0:6d:56:d0:f3:7d:b0:7c:17:aa:4c:1d:
                    5f:79:77:5f:34:e0:dc:38:a0:22:bd:07:18:85:c2:
                    63:c5:e4:ff:66:ac:7c:61:eb:5b:06:c6:1a:de:6d:
                    52:72:fe:2b:59:9a:11:7b:6e:4f:de:ed:7b:83:78:
                    11:0e:eb:e0:be:c5:3d:13:88:9c:12:57:87:e9:1e:
                    8d:9f:69:01:ae:01:d2:b3:b2:d7:5d:6f:57:e5:a4:
                    8b:82:a3:fb:cd:e7:a3:be:89:20:52:69:b0:18:a9:
                    a1:2d:60:fc:52:25:f4:d1:31:96:74:af:d9:61:7b:
                    03:ba:e6:16:db:e0:2f:20:82:f2:69:79:3d:b6:47:
                    11:00:3b:7d:9b:2f:39:73:7e:84:8d:83:3c:e9:e1:
                    f1:90:b9:d8:47:e3:5d:4d:d2:df:b4:e4:ce:db:8c:
                    63:19:aa:2c:a7:4b:d1:8d:21:02:d9:85:3b:98:fa:
                    4e:8f:10:c3:88:a8:7a:7f:c9:5e:64:e5:01:5c:c9:
                    67:6a:f6:8c:a2:04:55:c7:66:37:1e:65:d1:ae:16:
                    d7:86:6e:54:c3:1c:eb:e8:ab:7d:72:25:cd:3b:94:
                    32:91:3e:81:b4:a1:ad:bd:4b:2c:39:12:81:d0:71:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:F7:88:06:50:55:CA:6E:46:68:0A:30:26:99:AB:7D:0F:2C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b301434-8508-3e5a-87f3-08d0899b2f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:17:5c:18:60:8a:24:5a:01:f4:11:ea:f2:06:be:36:f9:
         40:c0:d1:ac:d6:4b:74:b4:a8:cb:85:c1:06:ee:25:fa:b2:e2:
         6b:8a:02:43:7c:a5:0e:36:f5:00:70:33:3a:4f:6d:69:0e:fa:
         0a:6a:09:2f:d4:69:54:dc:96:51:7b:04:a1:78:35:15:d1:9c:
         6e:3a:82:3a:76:b1:90:49:63:4a:12:ae:fe:32:74:22:03:ee:
         5c:50:2a:97:9e:12:ba:4b:d6:65:d2:b6:75:c1:00:31:5b:e7:
         1f:7e:78:0f:55:58:13:fe:98:b3:15:25:81:8d:6e:21:bf:da:
         1e:03:e8:2d:40:b2:1a:d2:42:99:ad:e5:d0:3e:4e:7d:e0:58:
         d5:95:fc:c9:81:77:6a:95:49:13:43:b3:89:9e:36:fc:a9:78:
         11:7d:f8:12:75:36:ef:d6:e6:77:57:10:63:dd:e4:a7:05:10:
         70:4e:c7:89:54:85:de:04:f6:5b:ea:68:1f:b9:9f:30:d3:b5:
         04:82:23:b9:88:eb:11:97:88:f5:dc:ef:29:06:8b:d2:52:f1:
         d2:79:0e:e3:f6:3c:7d:bf:82:13:20:a5:8f:ff:8b:ac:9b:2a:
         f9:61:6a:24:4d:77:ce:02:a0:ae:3c:03:72:1c:7d:3e:41:5d:
         ab:5e:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:15 2026 by rpki-client